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Amendment to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims : 

1 . (currently amended): A smart card, comprising: 
^communication unit to communicate with the outside; 

an information accumulating unit to accumulate data and a program; and 
an arithmetic processing unit to perform information processing, 

whoro i n: 

wherein said information accumulating unit stores value data, a transfer 
key used to update that updates t he value data, a transfer key identifier used to 
judge -that judges whether the transfer key is newer or older in accordance with a 
value of the transfer key identifier, an update key ucod to update t hat updates the 
transfer key, and an upper limit of the transfer key identifier that represents an upper 
limit of the transfer key identifier that can be stored by the smart card^ 

wherein said arithmetic processing unit updates the transfer key identifier 
and the transfer key by performing encryption using the update key on the basis of 
common-key cryptography^ and 

wherein said arithmetic processing unit thefHJpdates the value data by 
performing encryption using the transfer key on the basis of the common-key 
cryptography. 

2. (currently amended): A smart card according to claim 1 , whor ei n 
said ar i thmetic process i ng unit comprises the stops of: 
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wherein if command data that requests transmission of card information 
is received, said arithmetic processing unit transmits t ransm i ttina the transfer key 
identifier to the outside as response data^ 

wherein if command data that requests update permission of the 
transfer key is received, said arithmetic processing unit qenerates q e n e rat i nq a first 
random number and transmitting the first random number to the outside as response 
dataj A 

wherein if the command data which requests to obtain the transfer key, 
and which stores a second random number, is received, said arithmetic processing 
unit transmits t ransm i ttinq first encrypted data, into which the second random 
number, the transfer key identifier, and the transfer key are encrypted by use of the 
update key on the basis of common-key cryptography, to the outside as response 
datafa and 

wherein if command data which requests update of the transfer key, and 
which stores second encrypted data, is received, said arithmetic processing unit 
decrvpts doorypt i ng the second encrypted data by use of the update key on the basis 
of common-key cryptography to extract first data, second data, and third data, and if 
the first data is equivalent to the first random number, and if a value of the second 
data is between a value of the upper limit of transfer key identifier and a value of the 
transfer key, uodates uodat i ng a value of the transfer key identifier to a value of the 
second data, and uodates uodating a value of the transfer key to a value of the third 
data. 

3. (currently amended): A smart card, comprising: 
a communication unit to communicate with the outside; 
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anjnformation accumulating unit to accumulate data and a program; and 

an arithmetic processing unit to perform information processing, 

where i n: 

wherein said information accumulating unit stores value data, a transfer 
key us e d to updat e t hat updates the value data, a transfer key identifier us e d to 
Hi€tee -that judges whether the transfer key is newer or older in accordance with a 
value of the transfer key identifier, a first public key certificate including a first public 
key, which i s used to updat e updates t he transfer key, a secret key corresponding to 
the first public key, and an upper limit of transfer key identifier that represents an 
upper limit of the transfer key identifier which can be stored by the smart card^ 

wherein said arithmetic processing unit updates the transfer key identifier 
and the transfer key by performing encryption using the first public key certificate 
and the secret key on the basis of public-key cryptography^ and 

wherein said arithmetic processing unit then-updates the value data by 
performing encryption using the transfer key on the basis of common-key 
cryptography. 

4. (currently amended): A smart card according to claim 3, wh e r ei n: 
sa i d arithmetic processing unit comprises tho stops of: 
wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits transm i tt i nq the transfer key 
identifier and the first public key certificate to the outside as response datai A 

wherein if command data which requests update permission of the 
transfer key, and which stores a second public key certificate including a second 
public key, is received, said arithmetic processing unit generates g e n e rat i ng a first 
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random number and transmitting the first random number to the outside as response 
datai a 

wherein if command data which requests to obtain the transfer key, and 
which stores a second random number and a third public key certificate including a 
third public key, is received, said arithmetic processing unit f irst cr e ating creates f irst 
encrypted data into which the transfer key identifier and the transfer key are 
encrypted by use of the third public key on the basis of public-key cryptography, next 
creat i ng creates f irst digital signature data from the first encrypted data and the 
second random number by use of the secret key on the basis of public-key 
cryptography, and lastly transmitt i ng transmits t he first encrypted data and the first 
digital signature data to the outside as response datat A and 

wherein if command data which requests update of the transfer key, and 
which stores second encrypted data and second digital signature data, is received, 
said arithmetic processing unit first chock i ng checksthe second digital signature 
data by use of the second public key on the basis of public-key cryptography, next 
decrypt i ng decrypts t he second encrypted data by use of the secret key on the basis 
of public-key cryptography to extract first data and second data, and lastly if a value 
of the first data is between a value of the upper limit of transfer key identifier and a 
value of the transfer key, updat i ng updates a value of the transfer key identifier to a 
value of the first data, and updating updates a value of the transfer key to a value of 
the second data. 

5. (currently amended): A smart card, comprising: 

aLCommunication unit to communicate with the outside; 

an information accumulating unit to accumulate data and a program; and 
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an arithmetic processing unit to perform information processing, 

wher e in: 

wherein said information accumulating unit stores value data, a transfer 
key usod to updat e that updates t he value data, a transfer key identifier us e d to 
iadee -that judges whether the transfer key is newer or older in accordance with a 
value of the transfer key identifier, an update key usod to update t hat updates t he 
transfer key, an update key identifier usod to j udg e that judges whether the update 
key is newer or older in accordance with a value of the update key identifier, a first 
public key certificate including a first public key, which i s usod to update updates the 
transfer key, a secret key corresponding to the first public key, and an upper limit of 
transfer key identifier that represents an upper limit of the transfer key identifier 
which can be stored by the smart cardi x 

. wherein said arithmetic processing unit updates the transfer key by use of 
the update key on the basis of common-key cryptography, or updates the transfer 
key by use of the first public key certificate and the secret key on the basis of 
common-key cryptography^ and 

wherein said arithmetic processing unit theo-updates the value data by 
performing encryption using the transfer key on the basis of the common-key 
cryptography. 

6. ( currently amended ): A smart card according to claim 5, whoroin: 
sa i d arithmet i c processing un i t compr i ses tho st e ps of: 
wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits transm i tt i ng the transfer key 
identifier, the update key identifier, and the first public key certificate to the outside 
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as response datat A 

wherein if command data that requests update permission of the transfer 

key is received, said arithmetic processing unit qenerates q e n e rating a first random 

number and transmitt i ng transmits the first random number to the outside as 

response data^ 

wherein if the command data which requests to obtain the transfer key, 
and which stores a second random number, is received, said arithmetic processing 
unit transmits t ransmitting first encrypted data, into which the second random 
number, the transfer key identifier, and the transfer key are encrypted by use of the 
update key on the basis of common-key cryptography, to outside as response dataf A 
and 

wherein if command data which requests update of the transfer key, and 
which stores second encrypted data, is received, said arithmetic processing unit first 
docrypting decrypts t he second encrypted data by use of the update key on the 
basis of common-key cryptography to extract first data, second data, and third data, 
and next if the first data is equivalent to the first random number, and if a value of 
the second data is between a value of the upper limit of transfer key identifier and a 
value of the transfer key, updat i ng updates a value of the transfer key identifier to a 
value of the second data, and updating updates a value of the transfer key to a value 
of the third data. 

7. (currently amended): A smart card according to claim 5, whor o in: 
said ar i thmotic processing un i t compr i ses tho stops of: 
wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits transm i tt i ng the transfer key 
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identifier, the update key identifier, and the first public key certificate to the outside 
as response data^ 

wherein if command data which requests update permission of the 
transfer key, and which stores a second public key certificate including a second 
public key, is received, said arithmetic processing unit aenerates a e n e ratinq a first 
random number and transmitting the first random number to the outside as response 
datai a 

wherein if command data which requests to obtain the transfer key, and 
which stores a second random number and a third public key certificate including a 
third public key, is received, said arithmetic processing unit f irst creat i ng creates first 
encrypted data into which the transfer key identifier and the transfer key are 
encrypted by use of the third public key on the basis of public-key cryptography, next 
croatino creates first digital signature data from the first encrypted data and the 
second random number by use of the secret key on the basis of public-key 
cryptography, and lastly transmitt i ng transmits the first encrypted data and the first 
digital signature data to outside as response datat A and 

wherein if command data which requests update of the transfer key, and 
which stores second encrypted data and second digital signature data, is received, 
said arithmetic processing unit first chock i ng checks t he second digital signature 
data by use of the second public key on the basis of public-key cryptography, next 
decrypt i ng decrypts t he second encrypted data by use of the secret key on the basis 
of public-key cryptography to extract first data and second data, and lastly if a value 
of the first data is between a value of the upper limit of transfer key identifier and a 
value of the transfer key, updat i ng updates a value of the transfer key identifier to a 
value of the first data, and updat i ng updates a value of the transfer key to a value of 
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the second data. 

8. (currently amended): A smart card, comprising: 

^communication unit to communicate with the outside; 

an information accumulating unit to accumulate data and a program; and 

an arithmetic processing unit to perform information processing, 

wh e r e in: 

wherein said information accumulating unit stores value data, efie two or 
more transfer keys uood to thatupdate the value data, a se l ection transfer key 
identifier that includes a selection transfer key identifier that identifies the transfer 
kev currently selected, and that identifies uood to i dont i fv said two or more t he 
transfer kevs k o v curront l v soloct o d , and an update key used to update the transfer 
keyj, 

wherein if the value of the transfer kev identifier, which is received bv said 
communication unit, is newer than that of said selection transfer kev identifier, and 
which is equivalent to either a value of said transfer kev identifier stored bv said 
information accumulating unit, said arithmetic processing unit updates tbesaid 
selection transfer key identifier to the transfer kev identifier rece ived bv said 
communication unit bv performing encryption using the update key on the basis of 
common-key cryptography^ and 

wherein said arithmetic processing unit thefhupdates the value data by 
performing encryption using the transfer key corresponding to the update transfer 
kev identifier on the basis of common-key cryptography. 

9. (currently amended): A smart card according to claim 8, whoro i n: 
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sa i d ar i thmot i c process i ng un i t comprises tho stops of: 

wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits t ransmitt i ng th e said selection 
transfer key identifier to the outside as response dataj a 

wherein if command data that requests update permission of the transfer 
key is received, said arithmetic processing unit oenerates gonorating a first random 
number and transmitting the first random number to the outside as response data^ 

wherein if the command data which requests to obtain the transfer key, 
and which stores a second random number, is received, said arithmetic processing 
unit transmits transm i tt i ng first encrypted data, into which th e said second random 
number, to e said selection transfer key identifier , and tho transfer koy are encrypted 
by use of the said update key on the basis of common-key cryptography, to the 
outside as response data^ and 

wherein if command data which requests update of the transfer key, and 
which stores second encrypted data, is received, said arithmetic processing unit 
decrvpts docrypting the second encrypted data by use of the update key on the basis 
of common-key cryptography to extract first data, second data , and third data , and if 
the first data is equivalent to the first random number, and if a value of the second 
data which is equivalent to one of values of ifr esaid transfer key identifiers,_and 
which is newer than that of said selection transfer kev identifier used to identify said 
transfer kev currently selected, updating updates a value of th e said selection 
transfer key identifier to a value of the second data. 

10.-19. (canceled) 
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